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Honorable  Chairpersons  and  members  of  the  Committees,  I  am  Director  of  the  Commonwealth's  Information 
Technology  Division,  and  Chief  Information  Officer.  Thank  you  for  the  opportunity  to  testify  before  you  today.  There 
is  a  tremendous  amount  of  terrain  that  we  could  beneficially  cover.  But  time  is  limited.  So  I  will  go  directly  to  the 
heart  of  where  I  believe  we  stand  on  the  issue  of  Year  2000  and  state  computer  systems,  and  to  what  I  am 
recommending  and  asking  for,  in  order  to  meet  the  following  objective:  preventing  material  disruption  of  state  services 
caused  by  any  manifestation  of  the  so-called  "millenium  bug". 

Circulated  to  the  committee  and  its  staff  are  two  binders.  One  is  labeled  Year  2000  Awareness  Program.  The  other  is 
labeled  Year  2000  Legislative  Testimony  Supporting  Materials. 

The  one  labeled  Year  2000  Awareness  Program  is  a  compendium  of  Year  2000  awareness  and  resource  materials 
representing  the  Information  Technology  Division's  outreach  to  state  agencies,  as  well  as  authorities  and  cities  and 
towns.  I  want  to  recognize  the  special  efforts  of  Val  Asbedian,  Daylia  Vaughan,  and  members  of  ITD's  Strategic 
Planning  Group  and  Year  2000  Program  Management  Office  in  preparing  and  managing  this  outreach  program.  In 
order  to  conserve  time,  I  make  these  rather  extensive  materials  available  to  you,  for  your  review,  without  further 
elaboration  or  testimony. 

The  second  binder  labeled  Year  2000  Legislative  Testimony  Supporting  Materials  has  6  major  tabs,  followed  by 
attachments.  There  is  one  tab  each  for: 

•  An  overview  of  the  responsibilities  and  authorities  of  the  Chief  Information  Officer; 

•  A  detail  of  Year  2000  compliance  activities  within  the  Information  Technology  Division  itself; 

•  An  overview  of  the  process  whereby  the  Information  Technology  Division  assesses  agency  status  on  Year  2000 
compliance; 

•  Results  of  extensive  interviews  compiled  by  our  Year  2000  Program  Management  Office  in  the  final  quarter  of 
calendar  1997; 

•  An  update  of  these  results  as  of  March  9, 1998; 

•  And  detail  backing  up  current  Year  2000  funding  requests. 

Please  turn  to  the  overview  behind  Tab  A. 

What  this  graphic  represents  are  some  key  areas  of  focus  for  Year  2000  compliance,  any  one  of  which  may  be  topic  for 
further  questions  by  this  committee. 

Wearing  one  of  my  hats,  I  am  the  director  of  an  agency  that  provides  critical  shared  computer  resources  and  services, 
some  of  which  serve  the  entire  enterprise  of  state  government.  ITD's  own  status  on  Year  2000  is  an  important  topic 
which  I  will  address  through  detailed  technical  materials  in  Tab  B. 

Wearing  another  of  my  hats,  the  Chief  Information  Officer  is  charged  through  legislative  authorization  with 
". .  .carry(ing)  out  such  functions  as  the  commissioner  (of  Administration  and  Finance)  may  from  time  to  time  deem 
necessary  for  the  efficient  and  economical  administration  of  information  technology  systems  within  the  executive 
departments. . .".    Executive  department  Year  2000  compliance  is  core  to  this  responsibility. 

In  addition,  the  Commonwealth,  through  various  instrumentalities,  has  direct  and  indirect  interests  in  protecting  the 
integrity  of  systems  supporting  non-executive  constitutional  offices,  independent  authorities,  cities  and  towns,  and 
indeed  private  companies  whose  Year  2000  system  problems  would  pose  any  inconvenience  or  hazard  to 
Commonwealth  citizens. 

Before  I  comment  on  anybody  else's  situation,  let  me  start  at  home,  so  to  speak. 
Please  rum  to  Tab  B  -  ITD  Year  2000  Compliance. 


ITD  has  five  areas  of  compliance  responsibility  directly  within  the  agency  itself: 

1 .  Enterprise  administrative  applications  (such  as  accounting  and  payroll); 

2.  The  shared  data  center; 

3.  State  government's  Wide  Area  Network  (WAN); 

4.  Departmental  Systems  for  those  departments  which  rely  on  ITD  programmers;  and 

5.  ITD's  own  internal  network  (LAN); 

I  will  bottom-line  these  technical  materials  by  saying  that: 

ITD's  target  for  the  systems  over  which  it  has  direct  control  is  Year  2000  compliance  by  the  end  of  calendar  year  1998. 
This  goal  is  aggressive  with  regard  to  the  amount  of  remediation  and  testing  remaining  in  some  of  the  enterprise 
administrative  applications. 

The  details  within  Tab  B  are  in  some  respects  irrelevant  to  your  level  of  senior  decision-making.  Irrelevant  should  I  ask 
you  to  wade  through  them  with  me.  But  highly  relevant  in  another  respect,  in  asking  you  to  visualize  how  complex, 
interrelated,  and  crucial  this  operation  is.    We  operate  two  major  mainframes  on  which  run  statewide  accounting  and 
payroll,  as  well  as  systems  supporting  the  entire  Registry  of  Motor  Vehicles  function,  and  soon,  Medicaid  claims 
processing.  We  directly  manage  a  wide  area  network  funneling  traffic  over  290  routers  and  switches.  We  provide 
programming  services  to  a  variety  of  departments,  and  high-volume  mail  and  print  operations,  and  the  statewide  Web 
site.  The  data  center  alone  relies  on  over  86  third-party  software  products  from  over  26  vendors  to  run  its  operations. 

But  my  greatest  concern  as  an  agency  director,  is  with  what  all  agencies  are  facing  in  this  red-hot  job  market.  The 
people  who  know  these  technologies  are  hard  to  come  by,  and  harder  to  pay  once  found.  And  we  depend  and  are  well 
served  by  dedicated  state  employees  who  know  not  only  the  technologies  but  the  actual  workings  of  specific  state 
systems.  Staff  recruitment  and  retention  has  been  and  will  continue  to  be  the  largest  single  risk  exposure  to  the  urgent 
work  in  front  of  us.    I  want  to  thank  Jim  Hartnett,  state  personnel  director,  for  his  energies  in  focusing  on  technical  pay 
issues,  though  there  are  some  rather  immutable  constraints  in  a  public  sector  environment  that  effectively  prevent  full 
market  parity  for  several  skill  categories.  Special  recognition  also  goes  to  Bureau  Directors  as  capable  as  those  I  have 
been  fortunate  to  work  with  at  the  Information  Technology  Division. 

I  would  now  like  to  turn  to  materials  in  Tabs  C,  D,  and  E  which  show  a  methodology  and  results  of  interviews 
conducted  by  ITD's  Year  2000  Program  Management  Office  in  October  through  December  of  1997,  with  an  update  as 
of  March  9. 

Again,  glossing  over  much  important  technical  matter,  there  is  reported  a  kind  of  risk  assessment  of  state  systems: 
"Red"  designations  for  entities  with  high  schedule  risks; 
"Yellow"  designations  for  entities  with  medium  schedule  risks; 
"Green"  designations  for  entities  with  low  schedule  risks. 

As  summarized  in  Tab  D,  in  the  4th  quarter  of  1997,  170  entities,  maintaining  217  mission  critical  systems,  were 
assessed.  Of  the  170  entities  assessed,  ITD  assigned  high,  or  "red",  schedule  risk  assessments  to  14  entities;  medium, 
or  "yellow",  schedule  risk  assessments  to  41  entities;  and  low,  or  "green",  schedule  risk  assessments  to  109  entities. 
Detail  and  an  update  as  of  March  9,  is  provided  in  Tab  E. 

How  should  one  interpret  these  results? 

First,  while  we  have  tried  in  every  way  to  create  consistent  criteria,  the  risk  ratings  have  a  degree  of  subjectivity,  and  are 
based  on  agency  self-reporting  as  confirmed  through  review  of  various  project  plans  and  status  reports.  Without  some 
attempt  at  risk  categorizations,  there  can  be  no  sensible  prioritization  of  efforts  and  ongoing  focus. 

Second,  these  risk  ratings  are  subject  to  change  quarter  by  quarter  based  on  how  much  is  discovered  by  an  agency 
during  its  assessments  and  remediations,  how  much  progress  and  momentum  the  agency  remediation  program  sustains, 
and  the  rapid  passage  of  time. 


High  schedule  risk  (the  red  categorization)  means  simply  that  —  it  does  not  necessarily  mean  delinquency  or  lack  of 
diligence.  As  an  example,  the  Department  of  Revenue  has  a  model  Year  2000  compliance  program  —  carefully 
managed,  funded  (up  to  this  point),  and  a  visible  priority  to  agency  management.  But  their  schedule  is  precariously 
tight.  As  with  other  agencies,  the  Year  2000  remediation  program  must  compete  with  other  vital  initiatives,  for  instance 
last  year  with  the  implementation  of  a  major  new  child  support  initiative  required  by  the  federal  government  in  order  to 
avoid  massive  penalties. 

As  I  cautioned  at  the  outset,  the  amount  of  detailed  assessment  information  we  are  conveying  is  large.  Rather  than  go 
ever  deeper  into  the  detail  now,  I  would  offer  you  my  following  interpretation  of  the  bottom  line: 

•  No  department  has  reported,  and  there  is  no  evidence  available  to  me,  that  any  executive  department  is  irrevocably 
"too  late"  to  be  able  to  fix  its  systems  in  time. 

•  But  there  is  substantial  work  necessary  in  a  terribly  short  time  (only  323  business  days  until  Fiscal  Year  2000)  in 
order  to  insure  smooth  continuity  of  operations. 

•  In  other  words,  at  this  point  in  time  I  believe  that  panic  is  uncalled  for,  but  complacency  and  "business  as  usual" 
would  be  ruinous  paths. 

•  In  terms  of  sheer  size  and  criticality  of  function: 

>  Medicaid  claims  processing; 

>  DOR  tax  systems; 

>  Statewide  accounting;  and 

>  Temporary  fixes  to  an  aging  statewide  payroll  system,  to  tide  us  over  until  the  new  HR/CMS  (Human 
Resources/  Compensation  Management  System) 

. .  .are  the  well  managed,  but  high-exposure,  projects  whose  compliance  activities  are  in  my  opinion  most  worthy  of 
your  support  and  concern  at  the  level  of  enterprise  operations.  In  addition,  a  lot  of  things  must  go  right  for  the  new 
BEACON  system  at  Department  of  Transitional  Assistance  to  install  its  Version  2,  statewide,  in  time  to  retire  non- 
compliant  legacy  welfare  applications. 

•  I  want  to  be  clear  in  saying  that  the  Year  2000  remediation  program  needs  more  money  to  succeed. 

■  I  want  to  thank  you  for  the  $7  million  appropriated  through  the  Fiscal  Year  1997  Chapter  88  final  deficiency 
budget. 

■  I  want  to  ask  for  your  expedited  approval  of  the  $  10  million  dollar  supplemental  request  the  Governor  filed  in 
H.5266  in  January,  which  supercedes  an  earlier  request  filed  by  the  Governor  last  October. 

■  And  I  need  to  give  you  notice  that  I  will  be  back  once  more  as  we  refine  final  estimates  on  residual  balances. 
We  are  likely  to  need  this  final  funding  commitment  prior  to  calendar  1999. 

■  These  amounts  relate  to  needs  currently  identified  within  various  executive  and  constitutional  offices,  as 
itemized  in  Tab  F.  These  estimates  do  not  attempt  to  incorporate  authorities,  or  cities  and  towns. 

Other  comparably  sized  states  have  been  creating  "Year  2000"  appropriations  in  excess  of  $50  million,  with  large 
reserves.  When  I  first  testified  before  you  on  this  topic,  I  told  you  that  I  believed  Massachusetts  could  cover  its  Year 
2000  problems  for  relatively  less,  because  of  your  foresight  since  1992  in  funding  major  systems  renovations  through 
Information  Technology  Bond  bills,  and  I  continue  to  maintain  that  view.  But  the  commitments  to  lesser  amounts 
earmarked  specifically  for  Year  2000  remediation  are  needed  on  an  expedited  basis,  and  I  am  asking  —  urgently  asking  - 
-  for  your  assurance  of  necessary  funding  in  near  timeframes. 


Finally,  I  would  like  to  ask  your  forbearance  in  allowing  me  to  respond  to  recent  media  issues  surrounding  the  issuance 
of  Auditor  DeNucci's  Report  on  the  Preparedness  of  the  Commonwealth  of  Massachusetts  to  Address  the  Year  2000 
Computer  Date  Issue. 

Hiawatha  Bray,  a  Globe  staff  member  whose  technology  columns  I  otherwise  enjoy  and  find  informative,  made  some 
comments  following  the  release  of  the  Auditor's  report  that  incorrectly  interpret  the  current  situation,  and  indeed  the 
supportable  conclusions  of  the  Auditor's  report  itself.  I  would  offer  the  following  responses: 

♦  In  the  article,  survey  non-respondents  were  counted  as  being  negative  respondents  -  a  practice  which  is  not 
supportable  in  statistical  interpretation. 

♦  The  bulk  of  non-respondents  do,  however,  appear  to  be  local  housing  authorities,  commissions,  and  regional 
development  and  transit  authorities.  By  number,  these  non-respondents  appear  to  strongly  negatively  skew  the 
results.  While  their  status  may  indeed  be  cause  for  concern,  it  is  simply  a  fact  that  I  would  trade  having  to  fix  a 
dozen  housing  authorities,  for  having  to  fix  one  state  accounting  system  on  any  day  of  the  week. 

♦  To  my  knowledge,  no  inquiries  were  placed  to  ITD  or  other  agencies  to  confirm  or  clarify  level  of  activity  by  state 
agencies  per  se,  and  yet  the  article  pronounced  that  state  agencies  have  "done  little  to  fix  the  problem",  and  an 
outside  analyst  -  again  someone  who  to  my  knowledge  never  inquired  at  ITD  or  other  agencies  as  to  level  of 
activity  -  was  quoted  to  say  that  the  private  sector  is  far  ahead  of  Massachusetts  state  government. 

This  having  been  said,  Mr.  Bray  extended  the  Auditor's  essential  public  service  in  finding  every  conceivable  means  of 
communication  to  let  the  sprawling  enterprise  that  is  government  ~  in  all  of  its  forms,  locations,  and  levels  -  know  of 
the  simple  truths  of  Year  2000:  there  are  no  silver  bullets;  it  takes  time  to  fix;  it  takes  more  time  to  test;  it  takes  money 
and  skilled  staff;  and  those  who  neglect  taking  it  seriously  ill  serve  the  public's  trust. 

In  addition,  the  recommendations  issued  by  the  Auditor  are  on  the  whole,  helpful,  thoughtful,  and  well-reasoned.  We 
appreciate  the  cooperation  and  consideration  our  office  has  received  in  its  relations  with  Deputy  Auditor  John 
Beveridge  and  his  staff.  We  look  forward  to  continued  coordination  and  mutual  effort  over  the  next  two  years. 


Digitized  by  the  Internet  Archive 

in  2014 


https://archive.org/details/year2000legislat00mass 


Overview  of  Scope  of  CIO  Authorities  and  Responsibilities 


Chief  Information  Officer 
M.G.L.  Ch.7  Section  4A. 

(d)  The  information  technology  division  shall  be  headed  by  the  chief  information  officer  who  shall 
also  serve  as  assistant  secretary  for  information  technology.  He  shall  be  appointed  by  the  secretary. 
The  chief  information  officer  shall  carry  out  such  functions  as  the  commissioner  may  from  time  to 
time  deem  necessary  for  the  efficient  and  economical  administration  of  information  technology 
systems  within  the  executive  departments  including,  but  not  limited  to,  setting  information 
technology  standards,  reviewing  and  approving  secretariat  and  department  information  technology 
strategic  plans,  reviewing  and  approving  the  planning?  design,  acquisition  and  operation  of 
information  technology  systems,  assessing  the  {performance  of  information  technology  systems  and 
operations,  managing  central  information  technology  systems,  and  managing  the  commonwealth's 
mailing  operations.  He  may  establish  such  bureaus^  offices  and  other  functional  units  within  the 
division  as  he  may  deem  appropriate. 


Information  Technology  Division 

Enterprise  Applications  Development 
and  Maintenance  (e.g.,  Accounting, 
Payroll,  Statewide  Web  Presence, 
Information  Warehouse) 

Other  Executive  Department  System  Operations 

(e.g.,  at  DOR,  DTA,  DMA,  etc.) 

Shared  Mainframe  Data  Center 

Wide  Area  Network 

Departmental  Systems  relying  on 
ITD  programming  staff 

ITD  Internal  Networks  (LANs) 

Year  2000  Activities  Within  ITD 

Category  1;  Enterprise  Administrative  Applications 
MMARS  —  Accounting  System 

Target:  October  26   In  conjunction  with  Vendor  SRC  and  sub-Vendor  REASONING  SYSTEMS 
Risks  include  History  of  Vendor  missing  target  dates,  Condensed  testing  schedule  (no  unit  testing 
planned),  expertise  shortage. 

PCRS  -  Payroll  Cost  Reporting  System 

Phase  I  Target:  October  26   Being  remediated  in  house.  Risks  include  Condensed  testing 
schedule  (combined  systems/acceptance),  expertise  shortage,  no  contingency  plan. 
Phase  II  Target:  December  '98.    In  conjunction  with  Vendor  INTERMETRICS  and  sub-Vendor 
FORMAL  SYSTEMS.  Risks  include  expertise  shortage,  small  window  following  Phase  I. 

PMIS  -  Legacy  State  Weekly  Payroll  System 

Phase  I  Target:  October  26   Being  remediated  in  house.  Risks  include  Condensed  testing 
schedule  (combined  systems/acceptance),  expertise  shortage. 

Phase  II  Target:  December  '98.    In  conjunction  with  Vendor  INTERMETRICS  and  sub-Vendor 
FORMAL  SYSTEMS.  Risks  include  expertise  shortage,  small  window  following  Phase  I. 

CAPS  -  Legacy  State  Monthly  Payroll 

Target:  October  26   Being  remediated  in  house. 

Information  Warehouse 

OK  by  close  of  calendar  year  1998 

Phase  I  complete  (data  and  views  converted,  now  using  bridging  program) 

Phase  II  dependent  on  MMARS  (remove  bridging  and  use  remediated  table  structures) 

PARIS 

OK  by  close  of  calendar  year  1998 

Phase  I  -  Data  available  in  Warehouse  -  will  be  remediating  atomic  extracts  to  support 
Warehouse  load  in  98 

Phase  II  -  Contingency  -  remediate  summaries  and  onlines  in  98  to  support  continued  use 

PARIS  IMAGINE 

Shutoff  in  98  -  no  remediation 

MMARS  IMAGINE 
Shutoff  now  -  no  remediation 

PMIS  IMAGINE 

OK  by  close  of  calendar  year  1998 
Option  I  -  Data  to  Warehouse 

Option  II  -  Contingency  -  remediate  mainframe  version  to  support  continued  use 


• 


Category  2:  Shared  Data  Center 


Year  2000 
Building  Blocks 
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Users  responsible  for  converting 
Programs  to  support  new  Dates  or 
Upgrading  to  higher  level  software. 
Data  structures  may  have  to  be 
changed. 


DCSB  is  responsible  for 
IBM  and  3rd  Party  Vendors 
Software  Upgrades  


A&B  Year  2000  Ready 
C 
D 
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F 
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Operating  System  has  to  be  upgraded  to  MVS/ESA  5.2 

VTAM,  NCP  &  TCP/IP  are  Ready.  CANDLE  Gateways  will  be  ready  next  release. 
TSO  &  COM-PLETE  are  Ready.  CICS  needs  to  be  upgraded  to  CICS  V4.1. 
PLI  &  ASSEMBLER  are  READY.  COBOL  II  will  have  to  be  converted  to  COBOL  for  MVS. 
FORTRAN  will  have  to  upgrade  to  Version  2.5. 
NATURAL  will  have  to  be  converted  to  Version  2.3.11. 
DB2  is  Ready.  ADABAS  needs  to  be  converted  to  Version  6.2. 

The  User  Departments  will  have  to  evaluate  there  own  situation.  Anyone  that  has  planned 
ahead  will  only  have  to  wait  until  all  software  products  have  become  2000  ready. 
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New  Processor 
Schedule  of  Events 


Current  Images 


Apply  PTPs  for  new  CMOS  Processor 


HDS  EX100 
84  MIPS 
ASYS 
MVS/ESA  4.3 

IBM  8090  600 J 
117  MIPS 
BSYS 
MVS/ESA  4.3 

AMDAHL  6990  2470 
110  MIPS 
RMVR 
MVS/ESA  4.8 


Phase  One 


Install  Dec,1997 


IBM  967 
265  Ml 

2R55 
[PS 

LPAR1 
ASYS 
Workload  from 
HDS  EX100 
MVS/ESA  4.3 

LPAR2 
BSYS 
Wrokload  from 
IBM  3090  600 J 
MVS/ESA  4.8 

Apply  any  PTF's  needed  for 


AMDAHL  5990  2470 
110  MIPS 
RMVR 
MVS/ESA  4.3 


Complete  connection  of  systems  by  Dec  6,1997 
Phase  Two 

Maintain  Current  workload  and  Test  TSYS  LPAR,  Jan  1998 


D3M  9672  R65 
265  MIPS 

LPAR1 

LPAR2 

LPAR8 

ASYS 

BSYS 

TSYS 

Current  Workload 

Current  Workload 

MVS/ESA  4.3 

MVS/ESA  4.8 

MVS/ESA  4.3 

AMDAHL  5990  2470 
110  MIPS 
RMVR 
MVS/ESA  4.3 


Phase  Three 


D3M  9672  R65 
265  MIPS 

LPAR1 

LPAR2 

LPAR8 

ASYS 

BSYS 

TSYS 

Current  Workload 

Current  Workload 

Testing  System  Software 

MVS/ESA  4.3 

MVS/ESA  4.3 

OS/390 

AMDAHL  5990  2470 
110  MIPS 
RMVR 
MVS/ESA  4.3 


Phase  Four 


IBM  9672  R55 
265  MIPS 

LPAR1 
ASYS 
Current  Workload 

OS/390  MVS/ESA  5.2 

LPAR2 
BSYS 
Current  Workload 

OS/390  MVS/ESA  5.2 

Test  LPAR3 
TSYS 

System  changes  or  Y2E 
OS/890 

AMDAHL  6990  2470 
110  MIPS 
RMVR 
MVS/ESA  4.3 


Year  2000 


Third  Party  Software 


Number  of 

Vendor 

Products 

Amdahl  Corp 

1 

BGS  Systems  Inc. 

2 

Boole  &  Babbage 

1 

Candle  Corporation 

1 

Chicago  Soft 

1 

Computer  Associates 

15 

Computer  Security  Institute 

1 

Compuware 

3 

Data  Retreival  Corp 

1 

IBI 

4 

Innovation  Data  Processing 

1 

Landmark 

3 

LPC  (Pitney  Bowes) 

2 

Merrill  Consultants 

1 

Mobius  Management  Systems 

3 

Praxis  (CCA) 

1 

SAS  Institute 

5 

Software  AG 

23 

Software  Engineering  of  America 

2 

Sterling  Commerce 

1 

Sterling  Software 

6 

Stile 

2 

Storage  Technology 

2 

Syncsort 

1 

Sy stemware,  Inc. 

1 

Treehouse  Software 

2 

26  Vendors  86 
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Category  3:  Wide  Area  Network 


•  The  number  of  routers  and  switches  today  under  ITD's  direct  control  is  290  today,  and 
MAGNet  is  still  expanding 

•  We  have  identified  2  projects  for  Y2K  compliance,  the  VTAM  software  upgrade  (ICANDLE) 
and  the  TMS  Network  Upgrade.  Both  are  funded.  We  are  planning  to  complete  work  by 
6/30/98,  and  Y2K  Compliance  testing  by  end  of  calendar  year  1 998,  to  meet  our  Y2K 
compliance  plan. 

•  We  are  contracting  Bell  Atlantic  Network  Integration  (BANI)  to  provide  a  Y2K  Assessment  of 
MAGNet  as  insurance  (see  below  for  details). 

Note:  Consistent  with  your  scope  statement,  ITD  CSB  does  not  have  primary  direct  responsibility 
for  the  following  special  networks.  Therefore,  these  networks  are  not  in  the  ITD  CSB  Y2K 
Compliance  Plan  (draft). 

Special  Commonwealth  Networks 

BHE  Board  of  Higher  Education  (MECN) 

CHS  Criminal  History  Systems  Board 

DAA  District  Attorneys 

ENV  Executive  office  of  Environmental  Affairs 

LOT  Lottery  Commission 

RMV  Registry  of  Motor  Vehicles 

SEC  Secretary  of  State 

TRC  Trial  Courts  (SJC  and  APC  connected) 

DET  Department  of  Education  &  Training 

DOR  Department  of  Revenue 


Agency  LANs 

Also  consistent  with  your  scope  statement,  Agency  LANs  are  not  included  in  the  ITD  CSB  Y2K 
Compliance  Plan  (draft).  ITD  CSB  direct  responsibility  for  MAGNet  TCP/IP  routed  network  ends 
at  the  router  to  an  Agency's  LAN.  The  Agencies  are  responsible  for  their  LANs.  You  might  want 
to  highlight  this  because  very  few  people  understand  the  MAGNet  network  topology. 

There  are  193  Agencies  connected  to  MAGNet  (charge-back),  with  over  300  Agency  LANs. 

Voice  Networks 

ITD  is  only  responsible  for  the  PBX  in  the  State  House.  All  other  PBXs  are  the  responsibility  of 
User  Agencies. 

BANI  MAGNet  Y2K  Assessment 

To  supplement  CSB's  Y2K  plan,  and  to  insure  complete  coverage,  Bell  Atlantic  Network 
Integration,  Inc.  (BANI)  has  proposed  a  Y2K  Network  Assessment  consulting  engagement. 

The  proposal  is  expected  by  2/20/98*.  to: 

1 .  Confirm  inventory  of  CSB  network  objects  for  Y2K  compliance  certification, 

2.  Clearly  define  CSB/Agency  interface  (LAN  Router,  not  application), 

3.  For  each  network  object,  confirm  version  and  revision  level  for  Y2K  compliance  (1999-2000 
year  change); 


4.  Include  requirements  for  leap-year  date  change, 

5.  Identify  symptoms  of  non-compliance, 

6.  Propose  test  plan  to  confirm  Y2K  compliance  for  CSB, 

7.  Prepare  recommended  test  plan  to  assist  Agencies  in  determining  Y2K  network 
requirements,  if  any. 

Deliverables  are: 

1 .  Report  of  network  inventory  objects, 

2.  Diagrams  and  collateral  materials  to  define  CSB/Agency  interface, 

3.  Network  test  plan  that  validates  CSB  requirements  for  Y2K  compliance. 

4.  Recommended  Agency  test  procedures  to  determined  Y2K  network  requirements. 

•Mark  Pestana,  Branch  Sales  Manager,  BANI  (781)  438-2176 

Category  4:  Departmental  Systems  Which  Rely  on  ITD  Programming  Resources, 
and  CommonHelp 

Alcoholic  Beverage  Control  Commission  (ABC)  -  production  turnover  slated  for  end  of  May, 
targeting  end  of  FY98. 

Division  of  Standards  (DOS)-  production  turnover  slated  for  beginning  of  June,  targeting  end  of  FY98. 

Division  of  Registration  (REG)  -  production  turnover  slated  for  beginning  of  August,  targeting  8/98. 

Universal  Health  Insurance  (DET)  -  this  is  the  only  application  that  we  are  remediating  for  DET.  DSG 
Production  turnover  is  slated  for  the  beginning  of  August,  but  the  BARS  interface  programs  to  and  from 
MMARS  will  not  be  put  into  production  until  MMARS  is  ready  in  October.  All  programs  for  UHI  can  be 
turned  over  for  production  in  August,  except  for  the  BARS  Interface  programs. 

Campaign  and  Political  Finance  (CPF)  -This  department  has  developed  an  MS  Access  application  that 
mirrors  the  mainframe  application,  and  they  are  doing  duel  data  entry  so  that  their  letters  and  forms  will  still 
print  from  the  mainframe.  DSG  has  developed  an  upload  procedure  whereby  print  files  will  be  transferred 
from  their  server  to  our  mainframe  for  forms  and  letter  printing,  eliminating  the  need  to  do  duel  entry,  and 
solving  the  Y2K  problem.  The  mainframe  application  can  then  go  away. 

CommonHelp  -  ITD  has  a  letter  from  Applix  dated  5/12/97  stating  that  Applix  Enterprise  is  Year  2000 
compliant.  However,  when  we  called  them  to  double  check,  the  answer  we  received  was  not  very  clear. 
They  sent  us  another  fax  stating  that  since  third  party  software  (which  may  not  be  Y2K  compliant)  was 
integrated  into  their  software,  "Applix  was  actively  communicating  with  these  vendors".  "All  products  are 
expected  to  be  Y2K  compliant  no  later  than  July  31 , 1998."  Our  contact  at  Applix,  Paul  Bemier,  assured  us 
that  he  will  get  a  clearer  answer  to  us  ASAP. 


Category  5:  ITD's  Internal  Network 


>    Converted  from  non-compliant  Banyan  system  to  Windows  NT  and  Exchange  in  September,  1997. 
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Y2K  PMO  Interview  Results  for  Oct.-Dec.  1997 


By 

Commonwealth  of  Massachusetts,  Information  Technology  Division 
Year  2000  Program  Management  Office 
March  9, 1998 


1.  Background 

In  June  1997,  ITD's  Strategic  Planning  Group  (SPG)  established  the  Year  2000  Program  Management  Office 
(Y2K  PMO)  to  coordinate  the  Commonwealth's  Year  2000  effort.  The  purpose  of  the  Y2K  PMO  is  to: 

•  Ensure  accurate  monitoring  of  the  Commonwealth's  progress  in  meeting  the  Year  2000  challenge; 

•  Identify  risk  areas  and  risk  mitigation  activities; 

•  Disseminate  lessons  learned  to  state  agencies;  and, 

•  Serve  as  a  Year  2000  resource  to  state  agencies  and  departments  in  the  three  branches  of 
government. 

The  PMO  is  using  an  interview  process  to  monitor  the  status  of  the  Year  2000  projects  being  performed  by  the 
agencies  in  the  Commonwealth.  This  interview  process  includes  a  determination  of  the  approach  being  used 
by  an  agency  to  identify  its  exposure  to  the  Year  2000  problem  and  to  achieve  Year  2000  compliance.  The 
PMO  monitors  most  agencies  on  a  quarterly  cycle. 

In  addition,  agencies  are  asked  to  identify  their  mission  critical  and  essential  systems  and  to  provide  information 
on  the  strategy  for  and  progress  in  making  these  systems  compliant.  Mission  critical  systems  are  those: 

•  Which  directly  impact  the  health,  safety,  or  livelihood  of  Commonwealth  citizens. 

•  Which  directly  impact  the  revenue  to  the  state 

•  Whose  loss  would  severely  jeopardize  agency  delivery  of  services. 

Essential  systems  are  those  whose  loss  would  cause  a  disruption  of  some  agency  services  but  the  agency 
could  still  deliver  primary  services.  Note  that  most  agencies  also  have  a  third  category  of  systems  "other 
required"  which  affect  workflow  in  the  agency  but  whose  loss  would  not  significantly  impair  delivery  of  services. 
Agencies  are  expected  to  include  all  systems  in  their  Year  2000  projects,  but  the  PMO  is  only  monitoring  the 
status  of  mission  critical  and  essential  systems. 

This  report  provides  information  on  agency  Year  2000  project  status  for  the  Oct.  -  Dec.  1997  quarter. 


2.  Interviews 

The  Y2K  PMO  is  currently  monitoring  Year  2000  compliance  efforts  for  170  agencies  in  the  Commonwealth. 
This  is  an  increase  over  the  137  agencies  interviewed  in  the  previous  quarter.  The  agencies  are  classified  as 
shown  in  Table  1 . 


Interview  Results  for  Oct  - 


Dec.  1997 
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Table  1  Y2K  PMO  Agency  Interviews  for  Oct.  -Dec.  1997 


Agency  Type 

Number  of 
Agencies 

A&F 

20 

Constitutional  Offices 

6 

Consumer  Affairs 

10 

Economic  Development 

7 

Education 

2 

Elder  Affairs 

1 

Environmental  Affairs 

7 

Executive  Offices 

3 

General  Court 

3 

Health  and  Human  Services 

A  r- 

16 

Higher  Education 

33 

Housing 

2 

Independent  Agencies 

21 

Judiciary 

c 
0 

Labor  Development 

10 

Public  Safety 

20 

Transportation  &  Construction 

4 

Total 

170 

The  Y2K  PMO  staff  has  updated  Year  2000  project  status  for  these  agencies  using  a  combination  of  interview 
techniques  as  shown  in  Table  2. 

Table  2.  Y2K  PMO  Agency  Interviews  for  Oct.  -Dec.  1997 


Interview  Type 

Agencies 

In  Person 

63 

Phone 

45 

e-mail 

4 

Not  scheduled  this  quarter* 

47 

Unable  to  schedule 

11 

Total 

170 

*  PMO  elected  not  to  interview  these  agencies  this  quarter  as  their  scope 
of  work  is  limited  primarily  to  noncritical,  MS  Office-type  applications  and/or 
information  obtained  for  the  previous  quarter  indicated  low  risk. 


PMO  was  unable  to  schedule  interviews  with  the  agencies  listed  in  Table  3. 
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Table  3.  Scheduling  Difficulties  for  Oct.  -Dec.  1997 


Unable  To  Schedule 

A&F 

Teacher's  Retire  Board 

Const.  Off. 

Attorney  General 

Const.  Off. 

Auditor's  Office 

Higher  Ed 

Mass  Hospital  School* 

Higher  Ed 

UMASS-  Boston  Donahue  Institute* 

Higher  Ed 

UMASS  -  Worcester* 

Ind.  Agency 

Mass  Turnpike  Authority 

Judiciary 

Admin  Office  of  Trial  Courts 

Judiciary 

Appeals  Court 

Judiciary 

Board  of  Bar  Examiners 

Judiciary 

Supreme  Judicial  Court 

Of  these,  all  but  3  (denoted  by  *)  had  been  interviewed  in  the  Jul-Sep  quarter.  The  PMO  will  make  every  effort 
to  ensure  these  agencies  are  interviewed  in  the  next  quarter. 

Examples  of  the  interview  forms  are  provided  in  Attachment  A.  Only  one  item  requires  an  inference  on  the 
interviewer's  part;  that  is  the  Schedule  risk  assessment  on  the  System  Status  Notes  form.  Interviewers  were 
asked  to  assign  Low.  Medium,  or  High  risk  based  on  the  entire  discussion  of  the  system,  its  complexity, 
resources  that  are  being  applied,  and  current  concerns. 


3.   Y2K  Project  Status 

The  PMO  assigned  status  codes  -  Green,  Yellow,  Red  -  to  each  agency  based  on  information  collected  from 
the  interviews.  Agencies  which  have  made  all  of  their  mission  critical  and  essential  systems  compliant  (as 
defined  by  the  agency)  or  have  low  risk  in  remediating/replacing  and  redeploying  their  mission  critical  systems 
by  January  31 , 1 999  and  their  essential  systems  by  May  31,1 999  were  given  a  Green  status.  Agencies  which 
have  significant  risk  are  classified  as  Red  and  agencies  with  medium  risk  are  classified  as  Yellow. 

The  PMO  considers  the  status  code  assignments  as  a  snapshot  in  time  of  an  agency's  progress  in  achieving 
compliance.  Because  Year  2000  projects  are  dynamic  in  nature  and  because  the  code  assignments  involve 
some  subjectivity  on  the  part  of  the  PMO,  an  agency's  status  may  vary  from  one  quarter  to  another. 

For  this  quarter  status  codes  were  determined  using  information  on: 

•  Assessment  status.  Each  agency  should  have  completed  its  baseline  assessment  of  its  Year 
2000  exposure  by  this  point  in  time. 

•  Documentation  of  a  Year  2000  workplan  and  schedule.  Best  practices  indicate  that  Year  2000 
projects  which  utilize  strong  project  management  techniques  are  more  likely  to  succeed  than 
those  which  do  not. 

•  Budget  concerns.  Funding  concerns  at  this  point  in  time  typically  impact  Year  2000  project 
schedules. 

•  Schedules  for  achieving  compliance  of  mission  critical  and  essential  systems.  Schedules 
indicating  completion  within  the  ITD  guidelines  and  a  reasonable  time  period  for  testing  are 
associated  with  lower  risk. 

•  Other  risk  factors.  Staffing  concerns,  comprehensiveness  of  plan  and  approach,  system 
complexity  (e.g.,  size,  interfaces)  also  affect  determination  of  risk. 

Summary  statistics  for  the  agency  Year  2000  projects  are  shown  in  Table  4. 
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Table  4.  Y2K  Project  Status  Summary  for  Oct.  -Dec.  1997 


 ,  .  ,  

Summary                                             Oct-Dec  1997 

Status 

All  A nonpioc 

Mil  MycNoicb 

niyn  r  iiuiiiy 
Aaencies* 

Green  (low  risk) 

109 

34 

Yellow  (medium  risk) 

41 

17 

Red  (high  risk) 

14 

11 

Number  of  Agencies  Not  Rated  (not  enough  info)** 

6 

2 

Total  Number  of  Agencies 

170 

64 

*  These  agencies  have  been  designated  by  SPG  as  high  priority  based  on  criticality  of 
services  and/or  visibility  in  the  Commonwealth.  This  designation  effort  is  still  "in  progress". 
**  This  number  includes  (1)  agencies  which  have  never  been  interviewed  and  (2) 
agencies  which  could  not  be  scheduled  for  an  interview  in  Oct-Dec  and  interview 
information  from  the  Jul-Sep  quarter  was  insufficient  to  determine  a  rating. 


Attachment  B  lists  Y2K  project  status  by  secretariat  and  agency. 

Table  5  gives  a  comparison  of  the  Oct.  -  Dec.  quarter  with  the  previous  quarter. 


Table  5.  Comparison  of  Y2K  Project  Status  with  Previous  Quarter 


Summary                               Oct-Dec  1997 

Jul-Sep  1997 

All  Agencies 

High  Priority 
Agencies 

All  Agencies 

High  Priority 
Agencies 

Status 

Green  (low  risk) 

109 

34 

108 

43 

Yellow  (medium  risk) 

41 

17 

23 

13 

Red  (high  risk) 

14 

11 

5 

4 

Number  of  Agencies  Not  Rated 

6 

2 

1 

3 

Total  Number  of  Agencies 

170 

64 

137 

63 

The  data  indicates  a  number  of  changes  in  status  of  Year  2000  compliance  efforts.  A  number  of  other  agencies 
were  given  a  lower  rating  this  quarter.  This  dynamic  is  discussed  further  in  section  5.A.  The  rating  changes  are 
summarized  in  Table  6. 
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Table  6.  Change  in  Y2K  Project  Status  from  Previous  Quarter 


Wlanyc  in  Ola tuo 

lm  Droved 

3 

No  Change  or  NA* 

127 

Regressed 

34 

Unknown 

6 

Total 

170 

*  This  includes  agencies  not  interviewed  in  the  Jul-Sep  quarter. 


4.    System  Status 

The  170  agencies  that  the  PMO  is  tracking  have  reported  217  mission  critical  systems  and  170  essential 
systems  Table  7  provides  summary  information  on  the  compliance  status  of  these  systems  and  Table  8  gives 
PMO's  assessment  of  schedule  risk  for  the  mission  critical  systems.  Detailed  information  on  systems  is 
provided  in  Attachment  C. 


Table  7.  Summary  of  Compliance  Status  for  Systems 


Mission  Critical 

Essential 

Total 

Compliant* 

70 

58 

128 

%  Compliant 

32% 

34% 

Noncompliant 

147 

112 

259 

%  Noncompliant 

68% 

66% 

All  Systems 

217 

170 

387 

Agencies  with 
Systems 

101 

81 

131** 

*  Compliant  as  defined  by  the  agency. 

**  Agencies  with  mission  critical  systems  or  essential  systems  or  both. 


Table  8.  Summary  of  Schedule  Risk  for  Systems 


Schedule  Risk 

X?Mis$iOii 

Critic*!  I 

systems 

High 

36 

36 

Medium 

38 

19 

Low* 

132 

102 

TBD 

11 

13 

Total 

217 

170 

*  This  includes  systems  which  are  compliant 
as  defined  by  the  agencies. 
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5. 


Issues/Concerns 


A.  Regressing  Agencies.  Each  quarter  the  PMO  changes  the  Y2K  project  status  criteria  somewhat  to  better 
reflect  the  goals  and  guidelines  provided  in  ITD's  Meeting  the  Challenge  book  as  they  pertain  to  the 
particular  quarter.  That  is,  the  criteria  for  achieving  a  Green  status  becomes  more  rigorous  each  quarter  to 
reflect  the  decrease  in  schedule  time  remaining  for  achieving  compliance.  Thus,  agencies  generally  have 
to  achieve  some  progress  in  their  Y2K  projects  just  to  stay  at  the  status  level  obtained  at  the  previous 
quarter. 

Also,  it  is  not  unusual  for  agencies  to  regress  in  their  status  after  a  project  launch  just  due  to  understanding 
the  problem  more  thoroughly.  In  fact,  regression  can  be  considered  "healthy"  if  the  agency  understands  the 
reasons  for  the  regression  and  initiates  risk  mitigation  activities  to  counter  the  forces  causing  the  regression. 
In  these  cases,  significant  improvement  in  status  should  appear  in  the  next  quarter  or  two. 

However,  an  agency  can  regress  for  "unhealthy"  reasons,  in  particular, 

•  Competing  priorities  of  other  projects 

•  Funding  concerns 

•  Inability  to  complete  or  perform  a  comprehensive  assessment  (recommended  to  be  completed  last 
June) 

•  Inability  to  finalize  strategic  decisions  for  remediation  (e.g.,  whether  to  remediate  or  to  replace, 
whether  to  use  an  outside  vendor  or  perform  the  effort  in-house)  (recommended  to  be  completed 
last  August) 

•  Inability  to  develop  comprehensive  work  plans  and  schedules  for  tackling  the  problem. 

B.  Best  Practices.  The  PMO  believes  that,  for  the  agencies  which  have  elevated  Year  2000  to  the  priority 
required  by  Secretary  Baker's  directive,  the  PMO  efforts  to  disseminate  best  practices  are  working  and 
should  be  continued.  These  include  the  following: 

•  Interviews 

•  Liaisons 

•  User  Groups 

•  Year  2000  days 

•  Meeting  the  Challenge  book  and  web  site 

•  Ad  Hoc  activities,  e.g.,  workshops 

However,  the  PMO  believes  a  few  agencies  have  not  attained  the  level  of  commitment  required  to 
effectively  address  and  implement  the  best  practices. 

•  They  lack  a  single,  designated  Year  2000  coordinator  and  a  dedicated  Year  2000  project  team 

•  The  business  side  of  the  agency  is  not  actively  involved  with  the  project 

•  Their  assessments  and  projects  are  not  comprehensive 

•  Their  work  plans  and  schedules  are  not  documented  or  are  too  "high  level" 

•  They  are  not  adequately  addressing  interfaces  and  dependencies  (e.g.,  can  the  vendor  deliver  on 
time) 

•  They  are  not  allocating  sufficient  resources  (e.g.,  time,  resources)  to  testing.  While  the  PMO 
encourages  agencies  to  match  testing  requirements  to  the  criticality  of  the  system,  Y2K  literature 
indicates  that,  in  general,  the  testing  step  is  essential  and  should  not  be  neglected. 

C.  Contingency  Planning.  The  PMO  believes  that  information  for  some  mission  critical  systems  indicates  that 
they  will  not  meet  the  January  1 999  date  for  compliance.  ITD's  Meeting  the  Challenge  guidelines  identifies  . 
February  1 999  as  the  deadline  to  document  contingency  plans,  but  good  contingency  planning  requires 
significant  time.  The  PMO  is  concerned  that  agencies  will  not  allow  themselves  sufficient  time  for 
contingency  planning.  Agencies  in  this  condition  should  initiate  contingency  planning  for  these  systems 
now. 
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D    Cooperation.  Secretary  Baker's  directive  in  September  1997  was  an  excellent  boost  to  general  awareness 
of  the  Year  2000  problem  and  an  indirect  support  for  the  PMO  mission.  Most  agencies  (95%)  have  been 
very  cooperative  with  the  PMO  and  have  supported  the  interview  process.  However,  the  PMO  has  had  a 
few  instances  where  agencies  have  made  the  scheduling  effort  very  difficult  and  is  concerned  that  this  trend 
will  continue. 

In  addition,  the  PMO  performs  interviews,  discusses  best  practices,  and  includes  in  Awareness  activities 
authorities  and  agencies  outside  the  Executive  branch,  but  the  PMO  recognizes  that  these  agencies  are  not 
under  the  ClO's  authority  and  does  not  try  to  impose  action  items  on  this  group. 

E    Agency  Statement  of  Compliance.  Many  agencies  are  now  declaring  certain  of  their  mission  critical  and 
essential  systems  to  be  compliant.  The  PMO  is  finding  that  this  determination  is  inconsistent  across 
agencies.  Some  agencies  are  performing  or  planning  to  perform  rigorous  functional  and  Y2k-specific 
(future  date)  testing.  Many  agencies  are  planning  to  perform  only  functional  testing.  Others  are  looking  at 
the  data  and,  if  it  uses  4-digit  formats,  they  are  declaring  the  system  to  be  compliant  without  additional 
testing  It  is  essential  that  each  agency  determines  the  compliance  requirements  for  its  systems  early  in  the 
remediation  process  and  ensures  the  test  plan  includes  sufficient  tests  to  demonstrate  compliance. 

The  lack  of  consistency  and  rigor  for  declaring  compliance  is  a  matter  of  concern  not  only  to  the  PMO  but 
also  to  external  entities  which  rely  on  information  generated  by  state  agencies  and  are  working  on 
compliance  of  their  systems.  We  should  also  anticipate  more  questions  on  compliance  from  the  public  as 
Year  2000  issues  become  ever  more  visible. 

The  PMO  is  working  on  a  generic  "Statement  of  Compliance  Status"  to  help  establish  some  consistency  in 
how  agencies  determine  and  report  compliance.  The  current  version  is  shown  in  Attachment  D. 

F.  Funding.  The  PMO  has  been  actively  encouraging  agencies  to  review  their  projects,  identify/document 
their  funding  concerns,  and  notify  the  appropriate  agencies  (ITD  and  Budget  Bureau).  This  effort  is  working 
fairly  well,  but  the  PMO  is  concerned  that  agencies  which  have  not  done  a  comprehensive  assessment  and 
have  not  launched  their  remediation  projects  may  have  underestimated  the  necessary  resource 
requirements. 

G.  Agency  and  System  Priority.  The  PMO  initiated  an  effort  to  identify  agency/system  criticality  from  a 
Commonwealth  perspective  last  summer.  With  170  agencies,  131  of  which  reporting  information  on  217 
mission  critical  and  170  essential  systems,  it  is  very  important  to  complete  that  activity  to  ensure  the  PMO  is 
rationing  its  time  and  resources  effectively.  The  list  of  systems  must  be  validated  for  completeness  as  well 
as  for  accurate  criticality  designation.  It  may  be  necessary  to  add  a  Commonwealth  criticality  designation  in 
addition  to  the  agency  criticality  designation. 


List  of  Attachments: 

A        Example  of  Interview  Forms  for  Oct-  Dec  1 997 

B         List  of  Y2K  Project  Status  by  Secretariat  and  Agency 

C        List  of  Mission  Critical  and  Essential  Systems  by  Secretariat  and  Agency 

D        Statement  of  Compliance  Status 
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Y2K  PMO  Memorandum 


Date:  March  9, 1998 

To:  Val  Asbedian 
CC: 

From  Daylia  Vaughan 

Re:  Updates  to  Agency  Status  as  of  March  9, 1 998 


We  have  obtained  new  information  on  some  of  the  Year  2000  projects  for  agencies  which  were  in  the  Red  and 
Yellow  schedule  risk  categories  for  the  last  quarter  (Oct.  -  Dec.  1998).  Until  we  have  completed  all  of  the 
interviews  for  this  quarter  and  have  analyzed  the  data,  we  cannot  say  exactly  how  this  information  will  affect  the 
Red/Yellow/Green  status  codes  for  the  current  quarter  (Jan.  -  Mar.  1 998). 

However,  it  may  be  beneficial  to  consider  the  new  information  in  conjunction  with  the  data  from  the  last  quarter 
to  determine  a  clearer  picture  of  the  risks  and  progress  occurring  at  these  agencies.  This  information  is 
summarized  in  the  attached  table. 
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Attachment  A 

Example  of  Interview  Forms  for  Oct-  Dec  1 997 


Agency  Co 


1.  The  primary  functions  are  Ciant  Services  (casa  managamant)  and  6anaral  Office  Maing  1st. 

2.  This  system  «1  total aca  with  Naw  England  Max.  Tba  atari aca  deraftren  tad  tast  wl  ba  part  af  tha  aystaa  development. 

3.  TIm  aystaa  requres  that  alanrehaaa  Windows  86  or  NT.  Cerrerrtly  ea>  tha  aanagan  are  a*  NT. 

4.  Tha  vandar  doing  tha  development.  Independent  Software  Censahsnts,  has  haan  taU  ta  stew  dawn  until  tha  funding  far  tha  hardware 

comas  through. 

5.  The  anginal  schedule  for  this  system  was  deployment  in  12/97.  The  now  expected  deployment  date  is  unknown  unti  the  funding 
comes  in. 

6.  There  is  no  contingency  as  the  vendor  for  the  currant  system  fn  Alpha  41  is  out  of  business 
I  Actions: 

1.  PMO:  Pal  Barbara  an  tha  distribution  1st.  Done. 
1 2.  Barbara:  Ask  about  the  eompience  af  tha  phone  system. 

I Statement  of  Risk: 

1.  C emplane*  can  ba  achieved  in  abaut  3  months  from  funding  *t  urn-en". 


mm 


Attachment  B 

List  of  Y2K  Project  Status  by  Secretariat  and  Agency 
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Statement  of  Compliance  Status 
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ITD  Year  2000  PMO 
Agency  Year  2000  Statement  of  Compliance  Status 


Secretariat: 


Agency  Name:  ;  Date: 


In  September,  Charles  Baker,  the  Commonwealth's  Secretary  of  the  Executive  Office  of 
Administration  &  Finance,  issued  a  directive,  effective  immediately,  stating  that  "Uninterrupted 
turn-of-the-century  service  delivery  is  each  agency's  top  operational  planning  priority. 

The  undersigned  confirm  that  the  agency  named  above  is  actively  working  to  achieve  Year  2000 
compliance.  The  attached  documents  indicate  the  agency's  status  at  this  time. 


Signature  of  Agency  Year  2000  Project  Coordinator  Date 


Signature  of  Agency  Head  5ate" 


Signature  of  Cabinet  Secretary 


Date 


Secretariat: 
Agency  Name: 


Part  1:  Agency  Compliance: 

1   All  PC's  have  been  checked  and  are  compliant. 

2.  All  LANs  are  compliant. 

3.  All  essential  embedded  systems  are  compliant. 


Date: 


Yes 
Yes 
Yes 


No 
No 
No 


System  Aii 

-                                                            -  <£ 

System  Statement 

4.  Agency  Essential  Systems: 


^^stsan^Sitjicbent . 

Aversion  m  Production!! 

Signature  of  Agency  Year  2000  Project  Coordinator 


v  Date 


Secretariat: 


Agency  Name: 


Part  2:  System  Compliance: 
System  Name:   


Date: 


□   Mission  Critical 


□  Essential 


1 .  This  system  will  function  correctly  in  regard  to  dates  for  25  years.  Yes   No 

(If  "No",  indicate  expected  lifetime  and  rationale.) 


2  Documentation  for  all  data  structures  used  for  input  or  output  by  the  system  which  have  been 
modified  as  part  of  the  compliance  effort  have  been  updated,  verified,  and  shared  with  data 
exchange  partners.  Yes   No  

(If  "No"  is  indicated,  provide  rationale.) 


# 


3 .  All  date  fields  in  data  structures  used  for  data  exchange  use  the  CCYYMMDD  format,  where 
CC  =  century,  YY  =  year,  MM  =  month,  and  DD  =  day  (e.g.,  August  4,  1997  is  formatted 
"19970804".  Yes_  No  

(If  "No"  is  indicated,  complete  the  following  table. 


4.  All  screens  and  reports  provide  4-digit  year  values.  Yes  _  No 
(If  "No",  indicate  expected  lifetime  and  rationale.) 


Data  Structure 

Bndge  Removal 

5    System  has  been  tested  for  the  following: 

•  September  9,  1999  roll-over.  Yes   No  

•  December  31,  1999  to  January  1,  2000  roll-over.  Yes   No  

•  February  28,  2000  to  February  29,  2000  roll-over.  Yes   No_ 

•  February  29,  2000  to  March  1,  2000  roll-over.  Yes   No  

•  December  30,  2000  to  December  3 1,  2000  roll-over.  Yes  _  No 

•  December  31,  2000  to  January  1,  2001  roU-aver.  Yes   No  

•  February  28,  2001  to  March  1,  2001  roU-over.  Yes  _  No  

•  February  28,  2004  to  February  29,  2004  roil-over.  Yes  _  No  _ 


Signature  of  Agency  Year  2000  Project  Coordinator 


Date 


* 


